Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

6449181764...2N.exe

windows7-x64

10

6449181764...2N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6449181764ab8b7abdd395d9c034f53adeb990080bb83b1a8cb90c36c21aed52N

  • Size

    135KB

  • Sample

    241018-gemvhazgrg

  • MD5

    9239e2832598e4ff002e71199f4bc4c0

  • SHA1

    0b7295fc847ea4892946ad062d287e1f36fdfc32

  • SHA256

    6449181764ab8b7abdd395d9c034f53adeb990080bb83b1a8cb90c36c21aed52

  • SHA512

    a0e4f26bc76129b7ed315976137a2a31ae85e51950d02b28f316baf554b7aa5e723dbeccf0df1ba5d284ec24bb42c0f0929768a8a7a18b8c322e95462c8b2027

  • SSDEEP

    1536:UfsEqouTRcG/Mzvgf7xEuvnXNTRdUzwTekUOisZ1yDDajtXbVZDqIH:UVqoCl/YgjxEufVU0TbTyDDalPDfH

Score
10/10
discoveryevasionpersistence

Malware Config

Targets

    • Target

      6449181764ab8b7abdd395d9c034f53adeb990080bb83b1a8cb90c36c21aed52N

    • Size

      135KB

    • MD5

      9239e2832598e4ff002e71199f4bc4c0

    • SHA1

      0b7295fc847ea4892946ad062d287e1f36fdfc32

    • SHA256

      6449181764ab8b7abdd395d9c034f53adeb990080bb83b1a8cb90c36c21aed52

    • SHA512

      a0e4f26bc76129b7ed315976137a2a31ae85e51950d02b28f316baf554b7aa5e723dbeccf0df1ba5d284ec24bb42c0f0929768a8a7a18b8c322e95462c8b2027

    • SSDEEP

      1536:UfsEqouTRcG/Mzvgf7xEuvnXNTRdUzwTekUOisZ1yDDajtXbVZDqIH:UVqoCl/YgjxEufVU0TbTyDDalPDfH

    Score
    10/10
    discoveryevasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks